Public bug reported:

Imported from Debian bug http://bugs.debian.org/1138464:

Package: pam-pkcs11
Version: 0.6.13-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -Wdate-time 
-D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration 
-ffile-prefix-map=/build/reproducible-path/pam-pkcs11-0.6.13=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection -Wno-pointer-sign -c cert_vfy.c  -fPIC 
-DPIC -o .libs/libcommon_la-cert_vfy.o
| cert_vfy.c: In function 'verify_crl':
| cert_vfy.c:193:3: warning: 'X509_cmp_current_time' is deprecated: Since 
OpenSSL 4.0 [-Wdeprecated-declarations]
|   193 |   rv = X509_cmp_current_time(lastUpdate);
|       |   ^~
| In file included from cert_st.h:37,
|                  from cert_vfy.h:30,
|                  from cert_vfy.c:18:
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| cert_vfy.c:202:3: warning: 'X509_cmp_current_time' is deprecated: Since 
OpenSSL 4.0 [-Wdeprecated-declarations]
|   202 |   rv = X509_cmp_current_time(nextUpdate);
|       |   ^~
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| In file included from cert_vfy.c:17:
| cert_vfy.c: In function 'check_for_revocation':
| cert_vfy.c:308:56: error: invalid use of incomplete typedef 'ASN1_IA5STRING' 
{aka 'struct asn1_string_st'}
|   308 |             DBG1("downloading crl from %s", name->d.ia5->data);
|       |                                                        ^~
| debug.h:55:58: note: in definition of macro 'DBG1'
|    55 | #define DBG1(f,a) debug_print(1, __FILE__, __LINE__, f , a )
|       |                                                          ^
| cert_vfy.c:309:57: error: invalid use of incomplete typedef 'ASN1_IA5STRING' 
{aka 'struct asn1_string_st'}
|   309 |             crl = download_crl((const char *)name->d.ia5->data);
|       |                                                         ^~
| make[5]: *** [Makefile:549: libcommon_la-cert_vfy.lo] Error 1

Full buildlog
        
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/pam-pkcs11_0.6.13-1_amd64-2026-04-19T08:44:05Z

Sebastian

** Affects: pam-pkcs11 (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: pam-pkcs11 (Debian)
     Importance: Undecided
         Status: New


** Tags: ftbfs openssl-4.0

** Bug watch added: Debian Bug tracker #1138464
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138464

** Changed in: pam-pkcs11 (Debian)
 Remote watch: None => Debian Bug tracker #1138464

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2155016

Title:
  pam-pkcs11: FTBFS with openssl 4.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pam-pkcs11/+bug/2155016/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to